Quote from
hardpeter on May 31, 2019, 4:52 am
@htb Yes, you are correct. In post-element.php it will look like this:
// Post message.
echo '<div class="post-message">';
// Initial escaping.
// $post_content = wp_kses($post->text, 'post');
$allowed_html = wp_kses_allowed_html('post');
$allowed_html['iframe'] = array('width' => array(), 'height' => array(), 'src' => array(), 'frameborder' => array(), 'allowfullscreen' => array());
$post_content = wp_kses($post->text, $allowed_html);
$post_content = stripslashes($post_content);
@htb Yes, you are correct. In post-element.php it will look like this:
// Post message.
echo '<div class="post-message">';
// Initial escaping.
// $post_content = wp_kses($post->text, 'post');
$allowed_html = wp_kses_allowed_html('post');
$allowed_html['iframe'] = array('width' => array(), 'height' => array(), 'src' => array(), 'frameborder' => array(), 'allowfullscreen' => array());
$post_content = wp_kses($post->text, $allowed_html);
$post_content = stripslashes($post_content);
Asgaros has reacted to this post.
